Privacy Policy

1. Who we are

Beaconmon (“we”, “us”, or “our”) provides website uptime and performance monitoring services accessible at beaconmon.com. This policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it.

2. What data we collect

We collect the following categories of personal data:

• Account data: Email address, name (optional), and hashed password when you create an account.
• Billing data: Payment and subscription information is processed by Freemius, Inc. (our Merchant of Record). We do not store full card numbers; we receive and store only a customer reference, subscription status, and plan tier from Freemius.
• Usage data: Monitor configurations (URLs, check settings), check results, alert channel configurations, and status page settings you create.
• Log data: Server logs including IP addresses, browser user agents, and request timestamps, retained for up to 30 days for security and debugging purposes.
• Cookies: We use a single session cookie to keep you logged in. We do not use advertising or tracking cookies.

3. How we use your data

We use your personal data only to:

• Provide and operate the monitoring service you signed up for.
• Send you transactional emails (alerts, account notifications, billing receipts). We do not send marketing emails without your explicit opt-in.
• Diagnose and fix technical issues.
• Comply with legal obligations.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-party processors

We share data with the following sub-processors, each bound by a data processing agreement:

• Freemius, Inc. — payment processing and subscription management (Merchant of Record). Freemius may be the data controller for billing data in certain jurisdictions.
• Resend — transactional email delivery (alert and account emails).
• Cloudflare — CDN, DDoS protection, and edge caching for status pages.
• Neon — managed PostgreSQL database hosting (your monitor data, check results, and account data are stored here).
• Sentry — error tracking. Error events may include request context but are stripped of payment or full authentication data.

5. Data retention

• Check result data is retained for up to 365 days and then deleted. Access within the app is limited to your plan's history window (7, 90, or 365 days).
• Account data is retained for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it longer.
• Server logs are retained for up to 30 days.

6. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email us at privacy@beaconmon.com. We will respond within 30 days.

If you are in the European Economic Area, you have rights under the GDPR including the right to lodge a complaint with your local supervisory authority.

7. Security

We use industry-standard security practices: encrypted connections (TLS), hashed passwords (bcrypt), and access controls that restrict employee access to production data. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Children

Beaconmon is not directed at children under 16. We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or by a prominent notice on the site before the changes take effect.

10. Contact

Questions about this policy? Email us at privacy@beaconmon.com.